Huawei Success Story - Scantist

HuaweiCloud

Published on

February 6, 2023

Scantist currently has more than 60 employees across Singapore, Mumbai, Beijing, Shanghai and Xi'an. Scantist harnessed the research achievements of the Cyber Security Lab at NTU to develop a series of product chains and DevSecOps tools, including SCA, DAST, SAST, SmartFuzzer, and OSSPERT.

‍

Scantist's story

‍

Scantist was founded in 2016 as a spin-off of the world-leading Cyber Security Lab at Nanyang Technological University (NTU), Singapore.

Scantist is the recipient of 2018 NRF National Cybersecurity Research Grant as well as the 2020 CSA Innovation Award and won at Huawei’s Spark Ignite competition program launched in 2021.

‍

Why HUAWEI CLOUD?

‍

The Huawei Cloud Spark Program helps boost branding to increase awareness of customers' brands.

Huawei Cloud is a flexible and fast public cloud that helps customers reduce costs.

Huawei Cloud shares its advanced technology with customers to help them improve their solution capabilities.

‍

Challenges

‍

Scantist focuses on security scanning products and is exploring security products for the open source libraries of the developer community. The challenges they are facing:

1) Complex system setup and permission control: The existing system is running on a bare metal server in the customer's office. Permission controls were not sufficiently refined. As a result, it was hard to trace malicious file uploaders during intrusions, and it was time- and labor-consuming to clean up all affected files after intrusions.

2) Slow upgrade package delivery: Scantist needs to provide upgrade packages every month. It takes more than ten hours to upload and download upgrade packages, as they have clients in China, and the uploading process is challenged by the Great Firewall (GFW).

3) The limited impact of Scantist in the developer community is hindering its business growth. As a result, the company needs to increase its impact through the Huawei Cloud Spark Program.

‍

Solutions

‍

Huawei Cloud offers abundant platform resources, data management capabilities and architecture containerization, and diverse products such as Elastic Cloud Server (ECS), Elastic Volume Service (EVS), Cloud Container Engine (CCE), Relational Database Service (RDS), and Host Security Service (HSS).

The collaboration between Huawei Cloud and Huawei Mobile Services helps the customer increase its impact in the developer community.

The customer and Huawei can discuss collaborations on DevCloud.

‍

Customer Benefits

‍

Huawei Cloud provides the service and technology resources of the Asia Pacific Spark Program, branding campaigns, promotion on Huawei AppGallery, and technical support for cost reduction. The ecosystem partner solutions offer the following benefits:

Huawei Cloud helps transform Scantist from a security tool provider into a rule maker in the security community, increasing its impact in the open source community.

The OSS-OPS platform is built on Huawei Cloud with unified open source libraries, security performance scanning, security certification and developer community.

The success of the Spark Program and projects in China can inspire Scantist to expand its impact in the developer community.

Huawei Cloud will quickly respond to the customer's feedback on cost analysis and control and usage of Huawei products.

Related Blogs

Find out how we’ve helped organisations like you

PAIStrike vs. DVWA - A Technical Deep Dive into Autonomous Attack Chains

In Part 1 of our series, we introduced the results of PAIStrike’s controlled benchmark against the Damn Vulnerable Web Application (DVWA), where it identified 18 high-confidence vulnerabilities. But the real story isn’t just the number of findings—it’s how they were discovered.

PAIStrike vs. DVWA - A New Benchmark for Autonomous Security Validation

This document contains a 3-part blog series rewriting the DVWA benchmark showcase based on the new validation report, complete with corresponding social media posts.

Redefining Automated Pentesting: PAIStrike Achieves L3 Capability with 100% Success on Stateful Attacks

PAIStrike is proud to answer that call with the results of its latest engine optimization on the rigorous, public XBEN benchmark. These results not only validate PAIStrike's performance but signal a fundamental shift in the maturity of automated penetration testing, confirming our transition to a true Stateful Automated Attack Engine.

View all